Leo Hemsted d14f33ea70 has_permissions() now checks user's orgs for <org_id> view args ...

view args are parameters within the route. for example,
`/organisation/<org_id>/users`. If there is an org_id, then check that
the user is part of that organisation (users.organisations is a list of
all orgs that user is a member of).

* platform admins ignore this check if restrict_admin_usage=False
* if an endpoint has both org_id and service_id, org_id takes
  precedence, but we should probably revisit this if we ever need
  to create such an endpoint.
* you now call `@user_has_permissions()` with no arguments for
  organisation endpoints - we can look at this if we decide we want
  more clarity.
* you should never call user_has_permissions without any arguments
  for endpoints that aren't organisation-based. We'll raise
  NotImplementedError if you do.

2018-03-06 13:08:07 +00:00

..

assets

Refactor to handle API errors for preview

2018-03-01 23:50:55 +00:00

main

add restrict_admin_usage flag to more of the send flow

2018-03-06 13:08:07 +00:00

notify_client

has_permissions() now checks user's orgs for <org_id> view args

2018-03-06 13:08:07 +00:00

status

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

templates

remove any_ from has_permissions

2018-03-06 13:08:07 +00:00

__init__.py

has_permissions() now checks user's orgs for <org_id> view args

2018-03-06 13:08:07 +00:00

.gitignore

…

asset_fingerprinter.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

cloudfoundry_config.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

commands.py

…

config.py

Merge pull request #1910 from alphagov/env-sh-fix

2018-03-01 11:21:00 +00:00

domains.yml

Remove central orgs that haven’t signed MOU

2018-02-26 08:53:48 +00:00

email_domains.yml

Split email list out again

2018-02-26 08:53:47 +00:00

event_handlers.py

…

proxy_fix.py

…

statistics_utils.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

template_previews.py

Enforce order and style of imports

2018-02-27 16:35:13 +00:00

utils.py

add restrict_admin_usage arg to admin_override

2018-03-06 13:08:06 +00:00

version.py.dist

…